Skills

Wiring up Laravel authentication & authorization — login, register, guards, policies, gates, roles, permissions, API tokens (Sanctum), OAuth2 (Passport), social login (Socialite), 2FA; NOT for Passport/Sanctum/Socialite alone (use those references instead).

Laravel Cashier billing — Stripe/Paddle subscriptions, trials, invoices, webhooks, payment methods, single charges, and customer portal. Use when implementing subscriptions, recurring billing, Stripe or Paddle integration, checkout flows, or payment webhook handling. Triggers: "cashier", "stripe", "paddle", "subscription", "billing", "payment", "invoice", "checkout", "pricing", "recurring payment", "payment method", "webhook".

Reference on Laravel database conventions — migrations, Eloquent relationships, N+1 and Big-O query optimization, indexing; when learning or reviewing database code (NOT for optimizing performance; use db-optimize).

Laravel deployment — Forge, Vapor, Docker, Bref (AWS Lambda), traditional servers, zero-downtime releases, environment/secrets, CI/CD pipelines, and Envoy task runner. Use when deploying, configuring hosting/servers, going to production, or wiring up CI/CD. Triggers: "deploy", "production", "hosting", "server", "Forge", "Vapor", "Docker", "AWS", "Bref", "Lambda", "CI/CD", "release", "go live", "rollback".

Laravel Horizon — Redis queue dashboard, supervisors and auto-scaling/balancing, multi-queue worker config, metrics, failed-job management, alerting (Slack/email/wait-time), job tags, and silencing. Use when configuring or monitoring queues with Horizon. Triggers: "horizon", "queue dashboard", "failed jobs", "queue metrics", "worker status", "queue monitoring", "redis queue", "job status".

Build server-driven single-page apps with Laravel + Inertia.js (Vue 3 or React) — controllers, shared props, useForm, partial reloads, file uploads, SSR. Use when the user mentions Inertia, a Vue/React SPA without an API, server-side routing with client-side rendering, Ziggy, or Breeze inertia.

Build Laravel Nova admin panels — resources, fields, actions, lenses, metrics, filters, and custom tools. Use when building a Nova admin, creating Nova resources/actions/filters/lenses/metrics, or comparing Nova vs Filament.

Laravel Octane high-performance application servers — Swoole, RoadRunner, FrankenPHP; concurrent tasks, ticks, Octane cache, Swoole tables, and memory/state safety. Use when optimizing throughput, running Octane, or handling long-running workers.

Laravel architecture and design patterns — SOLID, DRY, Repository, Action, Service, DTO, Strategy, Factory, Pipeline, Observer, and refactoring guidance. Use when structuring or reviewing code, choosing a pattern, refactoring fat controllers, or auditing codebase architecture.

Laravel performance optimization — caching strategies, query and N+1 fixes, Big O complexity, Octane/queue tuning, profiling, scaling, and server tuning. Use when the app is slow, you need to optimize speed, reduce memory, fix bottlenecks, or scale for traffic. Triggers "performance", "slow", "optimize", "speed", "cache", "fast", "scaling", "bottleneck", "memory", "N+1", "Big O", "O(n)", "complexity", "nested loop", "quadratic".

Laravel queues — jobs, batching, chains, events/listeners, notifications, retries, failure handling, and workers. Use when building async/background processing, dispatching jobs, sending queued notifications, or wiring up events and Horizon.

Laravel Scout full-text search — Algolia, Meilisearch, Typesense, database driver; searchable models, indexes, filters, pagination; when adding search. Use when the user mentions Scout, full-text search, Algolia, Meilisearch, Typesense, search indexes, searchable models, facets, or typo-tolerant search.

Laravel security conventions and OWASP best practices — XSS, SQL injection, CSRF, mass assignment, auth/authorization checks, security headers, rate limiting, encrypted attributes; when hardening code, reviewing for vulnerabilities (NOT for running a specific audit; use security-audit).

Laravel testing conventions — Pest/PHPUnit patterns, feature/unit/API tests, factories, assertions, TDD practices; when writing or structuring tests. Use when the user mentions testing, tests, Pest, PHPUnit, coverage, TDD, unit tests, feature tests, integration tests, or factories.

Laravel real-time / WebSockets — Reverb server, broadcasting events, public/private/presence channels, Echo client, scaling with Redis; when building real-time features (chat, notifications, live updates). Use when the user mentions WebSockets, real-time, Reverb, broadcasting, Echo, presence channels, live chat, pusher, or socket.

Scaffold a REST/JSON:API/GraphQL API — controllers, requests, resources, versioning, OpenAPI docs, rate limiting. Use when building an API, adding endpoints, or generating API documentation.

Scaffold a complete Laravel feature module — controllers, requests, resources, models, migrations, policies, tests; when building a new feature or CRUD (NOT for entire app; use scaffold-app).

Scaffold or build a Filament v3/v4 admin panel with resources, forms, tables, widgets, custom pages, relation managers, and RBAC (Filament Shield). Use when building an admin panel, back-office, dashboard, CRUD resource, or managing resources through a UI.

Build and scaffold Livewire 3 components, forms, tables, modals, real-time search, and reactive UI with Alpine. Use when creating interactive server-rendered components, dynamic forms, sortable/filtered tables, or SPA-like interfaces without a JS framework. Triggers: "livewire", "wire:", "reactive component", "livewire table", "livewire form", "alpine", "tall stack".

Scaffold a reusable domain module under app/Modules with contracts, services, DTOs, events, strategies; when building a shared module or domain logic without UI/routes (NOT for feature scaffolding; use laravel-feature).

Review code, a pull request, staged changes, or a path across security, quality, Laravel best practices, and testing; when reviewing a PR, auditing a diff, or checking staged changes (NOT for running a dedicated security audit; use security-audit).

Scaffold a service or single-purpose action class; when extracting business logic into a service, orchestrating operations, or creating a testable action.

Scaffold Claude Code plugin artifacts — plugin structure, manifests (plugin.json/marketplace.json), commands, agents, skills, MCP, and hooks. Use when building a Claude Code plugin or extension for distribution. Triggers: "scaffold plugin", "create plugin", "build claude plugin", "plugin structure", "marketplace plugin".

Scaffold a complete new Laravel application with architecture — migrations, models, controllers, views, policies, tests, seeders; when building a new app from a natural-language description (NOT for a single feature; use laravel-feature).

Run an OWASP security audit of Laravel code with false-positive filtering and confidence scoring; when auditing for vulnerabilities, injection, XSS, CSRF, auth gaps, mass assignment, or insecure config (NOT for general security best practices; use laravel-security).

Generate comprehensive Pest/PHPUnit tests (unit, feature, API, or Dusk browser) for a target class, controller, or feature. Use when writing tests, adding coverage for existing code, or doing TDD. Triggers: "write tests", "generate tests", "test coverage", "pest test", "add tests for", "TDD", "test this class".

Scaffold a Claude Code agent with role, capabilities, and workflow; when creating a plugin agent.

Generate AI features with Prism PHP (chat, embeddings, tool-calling) across OpenAI/Anthropic/Ollama; when adding AI services.

Generate a comprehensive codebase health report analyzing architecture, quality, security, performance, and dependencies; when auditing or understanding a Laravel project.

SET UP Laravel authentication with Sanctum/Fortify/Breeze, guards, roles & permissions, policies, social login, 2FA; when initializing auth in a new project (NOT for reference questions).

Configure automated backups (spatie/laravel-backup) — schedule, storage disks, retention, monitoring/notifications; when setting up backups.

Generate a broadcast event + channel wiring for real-time updates; when adding broadcasting.

Systematically diagnose and fix a bug — reproduce, root-cause, fix, regression test; when fixing a reported bug.

Set up CI/CD pipelines (GitHub Actions/GitLab/Bitbucket) — tests, linting, security scan, deploy stages; when configuring CI/CD.

Scaffold a Claude Code slash-command with frontmatter and prompt; when creating a plugin command.

Generate a database ER diagram or schema visualization from migrations and models in Mermaid or DBML format; when documenting the database schema.

Optimize database performance by analyzing queries, detecting N+1 and Big O issues, suggesting indexes, and recommending query tuning; when improving database speed (NOT for database conventions; use laravel-database).

Configure deployment — Forge/Vapor/Docker, env/secrets, zero-downtime, deploy scripts; when setting up deployment.

Generate project documentation — API docs, code docs, README sections from the codebase; when documenting a project.

Generate a typed DTO with spatie/laravel-data, validation, and casting; when creating data transfer objects.

Define a Laravel Pennant feature flag (class-based or simple), with scoping and rollout; when adding feature flags / A-B tests.

Scaffold geolocation features with distance queries, geocoding, spatial indexes; when adding location-based functionality.

Stage and create a well-formed git commit for the current changes. Manual invoke only.

Create a well-formed pull request (title/body/labels) from the current branch via gh; manual invoke only.

Cut a release — version bump, changelog, tag, GitHub release; manual invoke only.

Set up application health checks and uptime monitoring with spatie/laravel-health — checks, scheduling, dashboard, notifications; when adding health monitoring.

Scaffold a data importer for CSV/Excel with validation, chunking, error handling; when building bulk data imports.

Guided interactive mode — helps you pick the right laravel-agent skill for what you want to build. Use when unsure which skill or command to run, or when exploring what laravel-agent can do.

Generate a queued job with retries/backoff/middleware; when creating async jobs.

Run the full Laravel build and quality pipeline—Pint, PHPStan/Larastan, tests, asset build, optimization—as a one-shot quality gate before commit or deploy.

Refactor Laravel code for SOLID/DRY compliance — extract god classes, improve structure without changing behavior; when refactoring for better code quality.

Scaffold an MCP tool or server (PHP/TypeScript); when adding MCP capabilities to a plugin.

Migrate a legacy app or database into Laravel — schema import, data migration, model generation; when upgrading a framework or version.

Generate a Laravel notification with multi-channel support (mail, database, broadcast, SMS, Telegram, Discord, Slack, WebPush, FCM) and queueing; when adding notifications.

Scaffold a reusable Laravel package with proper structure, service provider, config/facade publishing, tests, and Packagist release setup—when building a distributable Laravel package.

Generate PDF documents (invoices, reports, certificates) using spatie/laravel-pdf or barryvdh/laravel-dompdf with templates and controllers; when adding PDF generation.

Publish a Claude Code plugin to marketplace — validate, bump version, tag, release; when releasing a plugin.

Set up Laravel Pulse performance monitoring — cards, recorders, custom metrics, dashboard auth; when adding app monitoring.

Install and configure Laravel Reverb WebSocket server — env, scaling, supervisor; when setting up Reverb.

Set up full-text search with Laravel Scout — install and configure Algolia, Meilisearch, Typesense, or database driver; mark models as searchable; index data. Triggers: "search", "Scout", "full-text search", "when adding search".

Set up SEO infrastructure — sitemaps, meta tags, Open Graph, structured data/schema, robots.txt. Triggers: "SEO", "sitemap", "meta tags", "schema", "Open Graph", "when adding SEO".

Scaffold a Claude Code skill with directory structure, references, and evals; when creating a skill.

Install and configure Laravel Telescope — debugging, request/exception/query inspection, watchers, auth gating, pruning, production guards. Triggers: "Telescope", "debugging", "when adding Telescope", "when adding debugging".

Run and report test coverage (Pest/PHPUnit), identify gaps, enforce thresholds; when checking coverage.

Upgrade Laravel/PHP versions with breaking-change handling, automated fixes, and dependency bumps; when upgrading to a newer Laravel/PHP version.

Scaffold webhook infrastructure with receiver endpoints, signature verification, dispatch/retry, and event handling; when integrating webhooks.